Remote Code Execution

⚔️ Attack Types Related 2,905
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,906

Image ID Title
CVE-2026-85978 An unauthenticated remote code execution vulnerability exists in the Policy Manager console of...
CVE-2026-19802 Vulnerability in WordPress (CVE-2026-19802)
CVE-2026-76801 Privilege Escalation in WordPress (CVE-2026-76801)
CVE-2026-85384 A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to...
CVE-2026-58822 Vulnerability in Google (CVE-2026-58822)
CVE-2026-49919 Vulnerability in Google (CVE-2026-49919)
CVE-2026-49921 Vulnerability in Google (CVE-2026-49921)
CVE-2026-49879 Out-of-Bounds Write in Google (CVE-2026-49879)
CVE-2026-49882 Vulnerability in Google (CVE-2026-49882)
CVE-2026-28618 Vulnerability in Google (CVE-2026-28618)
CVE-2026-28609 Vulnerability in Google (CVE-2026-28609)
CVE-2026-28604 Vulnerability in Google (CVE-2026-28604)
CVE-2026-72959 Vulnerability in Microsoft Windows 10 1607 (CVE-2026-72959)
CVE-2026-72950 Vulnerability in Microsoft Windows 10 1607 (CVE-2026-72950)
CVE-2026-70570 Use-After-Free in Microsoft Windows 10 1607 (CVE-2026-70570)
CVE-2026-69852 Vulnerability in Microsoft Windows 10 1607 (CVE-2026-69852)
CVE-2026-69590 Vulnerability in Microsoft Windows 10 1607 (CVE-2026-69590)
CVE-2026-54611 InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution…
CVE-2026-86732 Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element...
CVE-2026-75021 fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user…
CVE-2026-76967 SAP NetWeaver Business Client does not perform sufficient validation when processing certain...
CVE-2026-76958 SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted...
CVE-2026-86439 Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools
CVE-2026-86538 knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates...
CVE-2026-86540 knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json
CVE-2026-86437 Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint...
CVE-2026-86438 Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule...
CVE-2026-18355 A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base)...
CVE-2026-86426 Authentication Bypass in Librenms (CVE-2026-86426)
CVE-2026-86347 Vulnerability in Misp Project (CVE-2026-86347)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details